ChurchCRM SQL Injection Vulnerability (CNVD-2023-64496)

ChurchCRM is an open source CRM system for churches. ChurchCRM version 4.5.4 suffers from a SQL injection vulnerability that stems from a lack of validation of the ENtyid parameter against externally entered SQL statements. An attacker can exploit this vulnerability to execute illegal SQL command...